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Abstract 


Quantification  in  modal  logic  is  interesting  from  a  technical  and  philosophical  stand¬ 
point.  Here  we  look  at  quantification  in  autoepistemic  logic,  which  is  a  modal  logic 
of  self-knowledge.  We  propose  several  different  semantics,  all  based  on  the  idea  that 
having  beliefs  about  an  individual  amounts  to  having  a  belief  using  a  certain  type  of 
name  for  the  individual. 
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1  Introduction 


Autoepistemic  (AE)  logic  [21]  is  a  logic  of  self-belief,  or,  more  precisely,  it  is  a  logic 
of  an  agent’s  knowledge  of  his  own  beliefs.  Typically,  relationships  between  beliefs 
and  the  world  are  expressed  within  the  logic.  For  example,  to  state  the  proposition 
“if  my  brother  is  rich,  then  I  know  it,”  one  uses: 

(1)  P (brother)  D  LP (brother) . 

where  P(x)  is  the  proposition  that  x  is  rich,  and  L  is  a  modal  operator  expressing 
self-knowledge. 

The  statement  (1)  is  propositional.  Introducing  full  quantification  into  the  lan¬ 
guage  of  AE  logic  presents  both  a  challenge  and  an  opportunity.  The  challenge  is  to 
find  a  natural  semantics  for  expressions  that  have  quantifying  into  a  modal  context: 
variables  that  are  bound  outside  a  modal  operator,  but  used  inside  it.  The  oppor¬ 
tunity  is  that  the  expressive  power  of  the  logic  is  expanded,  and  it  is  possible  to  use 
statements  of  self-knowledge  for  many  representation  problems  in  AI:  domain  closure, 
the  unique  names  hypothesis,  minimizing  class  membership,  and  reasoning  about  the 
equality  of  terms. 

The  semantics  of  AE  logic  is  based  on  a  belief  set,  a  set  of  sentences  T  that  are 
taken  to  be  the  agent’s  beliefs.  The  expression  LP  has  a  simple  meaning  with  respect 
to  this  set:  P  is  a  member  of  the  set.  Think  of  the  belief  set  as  a  knowledge  base 
containing  an  agent’s  information  about  the  world  as  a  set  of  sentences;  among  these 
sentences  can  be  ones,  like  LP,  that  refer  to  the  knowledge  base  itself. 

There  are  many  types  of  knowledge  an  agent  may  have  about  his  own  beliefs.  Some 
of  this  knowledge  is  about  the  identity  of  individuals  that  have  certain  properties.  For 
example,  I  may  know  that  someone  is  rich,  without  knowing  who  that  someone  is,  in 
which  case  my  beliefs  would  contain  something  like  3 x.Px,  and  my  knowledge  of  my 
beliefs  would  include 

(2)  L3x.Px . 

Now  suppose  I  have  a  stronger  belief,  that  there  is  a  particular  person  who  is  rich. 
To  express  this  fact,  my  knowledge  base  might  contain  the  expression  Pa  for  some 
term  a  that  identifies  the  individual  in  question  for  me.  In  turn,  my  knowledge  of  my 
beliefs  would  say  that  I  know  that  I  have  a  belief  that  a  particular  individual  is  rich, 
and  this  could  be  expressed  by 

(3)  3®  .LPx. 

The  distinction  between  two  statements  (2)  and  (3)  is  well-known  in  standard  epis- 
temic  logics  with  possible- worlds  models.  In  these  logics,  an  agent’s  beliefs  are  repre¬ 
sented  as  a  set  of  possible  worlds,  intuitively  the  possible  ways  the  world  could  be  if 
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the  agent’s  beliefs  were  true.  The  sentence  (2)  is  true  if  in  each  such  possible  world, 
there  is  some  individual  with  property  P\  since  it  could  be  a  different  individual  in 
each  possible  world,  the  agent  doesn’t  know  a  particular  individual  for  which  P  holds. 
In  contrast,  (3)  is  true  if  in  each  possible  world  the  same  individual  has  property  P, 
so  the  agent  knows  who  has  the  property. 

Our  treatment  of  quantification  differs  from  this  norm  in  two  respects.  First,  as 
noted,  we  assume  an  explicitly  intensional  interpretation  of  free  variables  in  modal 
contexts,  so  that  an  agent  must  have  a  certain  kind  of  name  for  an  individual  in  order 
to  assert  (3).  Second,  because  the  logic  is  self-referential,  statements  about  beliefs 
can  have  the  effect  of  defaults.  For  example,  the  expression 

(4)  \/x.  P(x)  D  LP(x) 

says  that  if  any  individual  has  the  property  P ,  the  agent  will  know  it.  Interpreted 
as  one  of  the  agent’s  beliefs,  (4)  says  that  the  agent  believes  he  has  full  knowledge  of 
the  members  of  the  class  P.  So  if  the  only  member  of  P  that  the  agent  has  beliefs 
about  is  a,  the  agent  will  come  to  believe 

(5)  \/x.  P(x)  D  x  =  a  , 

i.e.,  that  there  are  no  other  members  of  P.  We  call  defaults  of  the  form  (4)  MIN 
theories,  and  we  will  show  that  they  have  a  close  relation  to  circumscription  over 
countable  models  [IS,  26]. 

Another  aspect  of  our  treatment  of  quantifying-in  is  that  we  can  reason  about 
the  equality  of  terms  when  using  defaults.  Our  semantics  recognizes  that  distinct 
terms  will  often  denote  distinct  individuals,  but  can  also  draw  conclusions  about  the 
equality  of  terms  when  defaults  are  present.  This  is  a  particularly  difficult  area  for 
other  nonmonotonic  logics. 

In  Section  2  we  recall  the  basic  definitions  of  AE  logic  without  quantifying-in. 
Some  properties  of  equality  in  the  logic  are  discussed  in  Section  3.  The  language 
and  semantics  of  quantifying-in  are  developed  in  Section  4,  then  used  to  discuss  the 
issue  of  knowing  who  an  individual  is  in  Section  5.  We  next  concentrate  on  technical 
results  for  MIN  theories  (Section  6)  and  apply  them  to  various  representational  prob¬ 
lems  (Section  7).  Section  S  discusses  a  further  refinement  of  MIN  theories  in  which 
predicates  can  be  fixed  during  minimization,  and  in  Section  9  we  give  the  connection 
between  MIN  theories  with  fixed  equality  and  circumscription  over  countable  models. 
Related  research  is  examined  in  Section  10. 
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2  Autoepistemic  Logic 

We  first  consider  autoepistemic  logic  with  equality  but  without  free  variables  in  modal 
contexts.  The  treatment  generally  follows  and  extends  [8]. 

Let  Cq  be  a  first-order  language  with  equality  and  functional  terms.  The  normal 
formation  rules  for  formulas  of  first-order  languages  hold.  A  sentence  of  Co  is  a 
formula  with  no  free  variables;  an  atom  is  a  sentence  of  the  form  P{t\,  •  ■  ■  ,tn).  We 
extend  Co  by  adding  a  unary  modal  operator  L ;  the  extended  language  is  called  C. 
C  can  be  defined  recursively  as  containing  all  the  formation  rules  of  £05  plus  the 
following: 

(6)  If  <j>  is  a  sentence  of  £,  then  so  is  L<f>. 

An  expression  L<f>  is  a  modal  atom.  Sentences  and  atoms  of  Co  are  called  nonmodal. 
The  argument  of  a  modal  operator  cannot  contain  free  variables,  so  there  is  no  quan¬ 
tifying  into  the  scope  of  a  modal  atom,  e.g.,  3 xLPx  is  a  not  a  sentence.  Often  we 
will  use  a  subscript  “0”  to  indicate  a  subset  of  nonmodal  sentences,  e.g.,  To  =  Tn£o- 
C\  is  the  subset  of  C  containing  all  sentences  with  no  nested  modal  operators. 

How  are  atoms  of  the  form  L<f>  to  be  interpreted?  Since  the  operator  L  refers  to 
the  beliefs  of  an  agent,  it  is  natural  to  use  a  set  of  sentences,  the  belief  set ,  as  an 
element  of  the  semantics.  Let  T  C  C  be  a  set  of  sentences;  we  say  that  a  first-order 
interpretation  w  respects  T  if  for  all  sentences  Lfd: 

(7)  tx?  f=  L<f>  iff  <f>  6  T  , 

that  is,  to  treats  the  sentence  L<f>  as  meaning  that  <j)  is  in  the  belief  set  F.  Logical 
implication  is  defined,  relative  to  a  particular  belief  set  F,  as 

A  f=p  <j>  iff  Vu>.  such  that  w  respects  T  and  is  a  model 
of  A,  io  J=  <}>  . 

Because  the  intended  meaning  of  L<f>  is  not  just  belief,  but  se//-belief,  the  correct 
belief  set  to  use  in  defining  an  agent’s  beliefs  is  the  very  belief  set  being  defined,  so 
that  the  definition  of  the  belief  set  becomes  circular.  Formally,  we  use  a  fixed-point 
equation: 

(9)  T  =  {<f>\  A  K  <f> }  . 

Here  the  index  T  is  the  belief  set  of  the  agent,  so  that  the  interpretation  of  L<f> 
is  correctly  taken  to  be  self-belief.  The  fixed-point  equation  states  that  an  ideal 
introspective  agent  should  have  a  belief  set  in  which  all  beliefs  follow  logically  from 

1If  w  respects  F  and  is  a  model  of  F  then  it  is  an  antoepisiemic  interpretation  of  F  [21]. 
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the  base  set  A,  under  the  assumption  that  atoms  L<fi  in  A  are  treated  as  referring  to 
the  belief  set  itself.  A  set  of  sentences  which  obeys  (9)  is  called  an  extension  of  the 
base  set  A.  Extensions  are  completely  determined  by  their  first-order  part,  called  the 
kernel  of  the  extension. 

We  use  Cn(.A)  to  mean  the  first-order  consequences  of  a  first-order  set  of  sentences 
X.  A  sentence  <f>  £  £  is  called  an  AE-consequence  of  the  theory  A  if  it  is  contained 
in  all  extensions  of  A. 


3  Equality 

The  equality  predicate  is  treated  in  the  standard  first-order  way.  Let  the  interpreta¬ 
tion  w  consist  of  (U,  v,R ),  where  U  is  a  universe  of  individuals,  v  is  a  mapping  from 
terms  to  individuals  and  predicate  names  to  relations,  and  R  is  a  set  of  relations. 
Then: 

(10)  u>f=fi=f2  iff  v(ti)  —  v(t2)  ■ 

In  this  semantics,  the  following  axioms  and  schemata  all  hold: 

Vi.  x=x 

/11\  Viy.  x  =  y  D  y  ~x 
^  ’  Vxyz.x  =  yAy  =  zDx  =  z 

Viy.  x  =  y  D  [<f>{x)  =  <f>{y)\ 

Here  <f>(x)  is  any  first-order  formula  with  the  free  variable  i. 

In  AE  logic,  since  extensions  are  closed  under  first-order  consequence  these  ex¬ 
pressions  are  also  in  any  extension.  In  addition,  because  extensions  are  closed  under 
instantiation,  all  substitution  instances  of  these  expressions  also  hold. 

The  equality  schema  does  not  have  much  impact  on  modal  atoms,  because  they 
do  not  contain  free  variables.  For  example,  Viy.  x  =  y  D  [LP( x)  =  LP(y)\  is  not  an 
expression  of  £,  and  so  is  not  part  of  the  schema.  But  the  substitution  instances 
a  =  b  D  [ LP(a )  =  LP(b)\  are  in  £,  and  in  general  they  are  not  AE  consequences  of  a 
theory. 

Example  3.1  Let  Cn{Pa,  Qb }  be  the  kernel  of  an  AE  extension  T.  T  contains  LPa, 
-< LPb ,  and  ~>L{a~  b ).  Let  w  be  a  first-order  interpretation  in  which  Pa  and  Qb 
hold,  and  for  which  a  =  b.  Since  w  respects  T  and  w  ^a  =  l)D  [ LPa  =  LPb], 
(a  =  b  D  [ LPa  =  LPb])  is  not  in  T. 

This  example  highlights  the  interaction  between  names  and  equality  in  AE  logic.  Take 
P  to  be  the  property  of  being  rich,  a  to  be  a  descriptive  term  for  the  mayor,  and  b  for 
the  police  chief.  An  agent  has  proof  that  the  mayor  is  rich  (LPa)  and  no  evidence  that 
the  police  chief  is  (-‘LPb).  These  are  statements  about  the  intension  of  the  terms  a 
and  b,  that  is,  the  agent  believes  that  whatever  individual  goes  under  the  description 
of  “mayor,”  whoever  he  is,  is  rich;  and  the  police  chief  is  not.  It  says  nothing  about 
whether  the  agent  knows  who  is  denoted  by  these  terms:  for  all  he  knows,  the  mayor 
and  the  police  chief  could  be  the  same  individual  (assume  that  this  is  a  small  town 
on  a  tight  budget).  So  if  the  agent  does  not  know  that  the  two  names  refer  to  the 
same  individual,  he  cannot  conclude  that  knowing  one  is  rich  implies  that  he  knows 
or  does  not  know  the  other  is  rich.  Contrast  this  with  (a  =  b  D  [Pa  =  Pb]),  which 
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is  true  in  all  extensions.  Here  we  are  simply  claiming  that  if  a  and  b  are  the  same 
individual,  he  must  be  rich  or  poor;  the  names  a  and  b  are  interpreted  extensionally 
in  this  context,  that  is,  they  simply  denote  the  same  individual. 

The  equality  substitution  schema  is  true  in  a  modalized  form,  given  by  the  next 
proposition. 

PROPOSITION  3.1  In  any  AE  extension,  all  instances  of  L(a  =  b)  3  [Lcf>(a)  =  L<f>(b)\ 
are  present,  where  <f>(x )  is  a  nonmodal  formula. 

Proof.  Either  L(a  =  b)  or  -> L(a  =  b)  is  in  every  extension.  If  the  latter, 
then  the  schema  instance  is  also.  If  the  former,  then  a  =  b  is  in  the  exten¬ 
sion,  and  since  it  is  closed  under  first-order  consequence,  so  is  <f>{a)  =  <f>(b). 

Since  extensions  are  closed  under  ,5'5-consequence  (see  [8],  Proposition 
3.2),  L<f>(a)  =  L<f>(b)  is  in  the  extension. 

From  this  it  is  possible  to  derive  certain  nonbeliefs  about  equality,  e.g.,  (LPa  A 
~'LPb)  3  -■JL(a  =  f>). 

We  can  exploit  the  self-referential  nature  of  AE  logic  to  draw  new  conclusions 
about  equality  by  explicitly  asserting  some  defaults.  For  example,  we  may  want  to 
infer  that  two  descriptions  for  which  we  have  differing  beliefs  actually  refer  to  different 
individuals.  Then  we  would  add  the  schema: 

(12)  L<f>(a)  A  ~'L<j){b )  3  a^b  . 

In  the  example  above,  this  would  lead  to  the  default  conclusion  that  the  mayor  and 
the  police  chief  are  different,  because  we  know  one  of  them  is  rich,  but  not  the  other. 

The  unique  names  assumption  is  that  every  term  refers  to  a  different  individual. 
This  property  arises  naturally  in  the  context  of  deductive  databases  [24].  We  can  use 
equality  schemata  to  state  a  flexible  unique  names  assumption.  For  any  two  distinct 
terms  a  and  b ,  assert  the  schema 

(13)  ->L(a  =  b)  3  a  ^  b  . 

Any  names  that  can  consistently  refer  to  different  individuals  are  forced  to  do  so.  If 
there  are  no  positive  assertions  of  equality  predicates  in  the  premises  A,  then  any 
extension  of  A  will  have  the  unique  names  property. 

Domain  closure  is  the  assumption  that  the  only  individuals  that  exist  are  those 
referred  to  by  the  terms  in  a  theory.  This  assumption  is  also  important  in  the  theory 
of  deductive  databases  [24].  AE  logic,  even  with  equality,  is  not  strong  enough  to 
assert  domain  closure  as  a  default  when  there  are  infinitely  many  terms. 

A  stronger  concept  than  domain  closure  is  domain  circumscription:  only  those 
individuals  necessary  to  satisfy  a  give  theory  T  are  assumed  to  exist  [18].  Unlike 
domain  closure,  domain  circumscription  tries  to  make  the  universe  of  individuals  as 
small  as  possible.  In  AE  logic,  we  could  try: 
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(14)  ~>L{a  y^b)  D  a  —  b  , 


but  this  just  says  that  as  many  names  as  possible  refer  to  the  same  individuals.  There 
can  also  be  unnamed  individuals  in  the  domain,  and  no  ground  equality  statements 
will  restrict  the  number  of  such  individuals. 
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4  Quantifying- in 

The  language  C  does  not  allow  the  presence  of  free  variables  in  a  modal  context 
(called  familiarly  “quantifying-in,”  e.g.,  3x.LPx).  In  this  section  we  extend  the  logic 
to  deal  with  such  expressions,  and  look  at  the  consequences  for  statements  of  equality 
and  identity. 

Let  qL  be  defined  as  the  sentences  of  Co,  together  with  the  formation  rule 
(15)  If  <f>  is  a  formula  of  qC ,  then  so  is  L(f>. 

As  usual,  the  sentences  of  qC  are  the  formulas  with  no  free  variables. 

It  is  not  obvious  how  to  extend  the  semantics  of  the  logic  to  deal  with  quantified-in 
expressions.  Recall  that  the  belief  set  T  is  a  set  of  sentences  that  form  the  beliefs 
of  an  agent.  To  interpret  L<f> ,  we  simply  ask  whether  the  expression  ^  is  in  T;  if  so, 
every  interpretation  w  that  respects  T  must  satisfy  L(f>.  But  with  the  quantified-in 
language,  we  must  also  be  able  to  interpret  L</>(x),  where  <f>(x)  is  the  proposition  that 
the  individual  x  has  the  property  <f>.  In  order  to  construct  a  propositional  expression 
whose  meaning  is  (f>{x ),  we  must  have  some  way  of  referring  to  individuals  in  the 
domain.  We  will  give  three  basic  methods  for  doing  this,  and  show  how  these  methods 
interact  with  different  assumptions  about  the  nature  of  terms  in  the  language. 

The  basis  for  all  of  these  schemes  is  a  set  of  terms  of  qC  that  are  singled  out  as 
appropriate  “names”  for  individuals.  We  call  this  set  Af.  Af  can  be  any  subset  of 
the  terms  of  qC ,  including  all  terms,  in  which  case  the  language  is  said  to  have  a  full 
name  set.  To  distinguish  elements  of  Af  from  terms  not  in  Af,  we  call  them  names. 

Obviously,  there  can  be  individuals  in  a  domain  that  do  not  have  a  name,  even 
if  the  language  has  a  full  name  set.  If  we  restrict  the  semantics  of  qC  to  just  those 
domains  in  which  every  individual  has  a  name,  then  we  make  the  assumption  of 
■parameter  interpretations.  Herbrand  interpretations  are  one  type  of  parameter  in¬ 
terpretation,  in  which  every  term  denotes  itself.  Parameter  interpretations  are  more 
general  than  Herbrand  interpretations,  since  every  Herbrand  term  is  unequal  to  all 
others.  In  parameter  interpretations,  two  terms  can  refer  to  the  same  individual. 

4.1  Any-Name  Semantics 

The  simplest  scheme  for  reference  to  domain  elements  is  to  use  the  denotation  map 
v  already  present  in  the  first-order  interpretation  w,  and  to  let  any  name  a  £  Af  such 
that  v{a)  =  x  suffice  to  pick  out  the  individual  x  in  modal  contexts.  We  extend  the 
rule  for  interpretations  respecting  a  belief  set  (7)  to  the  case  of  formulas  with  free 
variables. 
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Any-name  semantics: 

iu  respects  T  if  for  all  formulas  L<f>(x)  and  substitutions  x/k , 

w,x/k  f=  Lcf>(x)  iff  for  some  name  t  €  J\f  such 

that  v(t )  =  k,  f(t)  G  T. 

Here  w  is  an  interpretation  and  x/k  means  that  the  variable  x  is  to  refer  to  the 
individual  k ;  so  we  say  that  cf>(x )  is  believed  if  k ,  the  individual  x  refers  to,  has  a 
name  t  such  <j>(t)  is  believed.  The  normal  truth-recursion  rules  for  quantifiers  hold, 

e-g., 

w  f=  Vx./>(x)  iff  for  all  individuals  k  €  U, 
iu,x/ k  \=  (f>(x). 

The  definition  of  extension  for  qC  does  not  need  any  changes,  but  because  the 
concept  of  respecting  a  belief  set  is  expanded,  the  resulting  extensions  are  not  the 
same  for  the  two  languages.  One  of  the  most  useful  results  in  AE  logic  over  C  is  that 
any  set  of  nonmodal  sentences  has  a  unique  AE  extension.  This  result  carries  over  to 
the  quantified-in  language. 

PROPOSITION  4.1  If  A  is  a  set  of  nonmodal  sentences  from  qC,  it  has  exactly  one 
AE  extension  T.  To  is  the  first-order  closure  of  A. 

Proof.  We  define  the  sets  S(n)  in  the  following  iterative  fashion: 

5(0)  =  {<f>  G  £o  |  A  |= 

S{n)  =  {(f)  G  £n  \  A  Ks(n-i)  <f>} 

Let  Tn  be  the  set  of  sentences  of  T  from  Cm  and  let  5  be  the  infinite  union 
of  all  S(i).  We  can  show  that  if  T  is  an  AE  extension  of  A,  Tn  =  5(n); 
there  is  thus  at  most  one  AE  extension  T,  with  T0  =  5(0),  the  first-order 
closure  of  A.  We  prove  existence  by  showing  that  5  is  always  an  AE 
extension  of  A.  See  the  proof  of  Proposition  2.1  [8,  pp.  371-372]  for  the 
details,  since  it  applies  here  without  change. 

In  addition,  extensions  in  q£  are  stable  sets  [27]. 

PROPOSITION  4.2  Any  extension  T  satisfies  the  following  properties 

1.  T  is  closed  under  first-order  consequence. 

2.  If  <f>  G  T ,  then  L<f>  G  T. 

3.  If  <f>  T ,  then  —>L(f)  €  T. 
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Proof .  The  first  item  follows  from  the  fact  that  extensions  are  defined 
using  consequence  under  first-order  valuations.  Note  that  L(f){x ),  with  free 
variable  x,  is  treated  from  a  first-order  viewpoint  as  a  unary  predicate, 
dissimilar  to  any  other  predicate,  including  Lf(a)  for  any  term  a. 

The  second  two  items  follow  from  the  first-order  valuations  respecting 
the  belief  set.  In  fact,  only  the  nonqualified  form  of  respect  (7)  is  needed 
here,  so  any  semantic  account  of  quantifying-in  will  yield  extensions  that 
are  stable  sets. 

Finally,  if  the  sentences  of  A  do  not  have  any  nested  modal  operators,  than  the 
kernel  of  the  extension  satisfies  the  following  reduced  fixed  point  equation. 

PROPOSITION  4.3  If  A  is  a  set.  of  sentences  from  Ci,  then 
S  =  {(j)  €  C0  |  A  \=s  <f>} 

if  and  only  if  S  is  the  kernel  of  an  extension  of  A. 

Proof.  We  define  the  sets  S(n)  in  the  following  iterative  fashion: 

5(1)  =  S  as  defined  above 
S(n)  —  {<j>  €  Cn  |  A  l=s<n-i)  <£} 

The  proof  proceeds  along  the  same  lines  as  that  for  Proposition  4.1.  The 
only  change  is  that  we  start  the  recursive  definition  with  5(1)  instead  of 

5(0). 

We  can  use  these  results  to  explore  some  of  the  facts  about  quantification  and 
equality  in  modal  contexts.  A  given  individual  x  may  have  none  or  many  names  in  a 
model,  a  circumstance  which  leads  to  some  interesting  behavior  in  extensions. 

EXAMPLE  4.1  Let  A  =  {Pa},  and  Af  =  {a,  6}.  By  Proposition  4.1  there  is  a  single 
extension  T  of  A,  with  T0  =  Cn(Pa).  Therefore,  we  know  that  LPa  and  -• LPb 
are  in  T.  By  the  valuation  rule  for  modal  atoms  (16),  Bx.LPx  will  be  true  in  any 
interpretation  respecting  T0,  if  there  is  some  individual  x  such  that  x  =  v(a). 
Every  interpretation  has  some  such  individual,  and  hence  Bx.LPx  is  true  in 
every  model  of  A  respecting  To,  and  hence  in  T. 

Another  sentence  contained  in  T  is  Vx.x  =  a  D  LPx.  To  see  why  this  is  so, 
let  x  be  an  individual  with  x~v{a).  Since  LPa  is  in  T,  LPx  is  true  in  all 
interpretations  which  respect  T,  and  so  the  whole  sentence  is  true  in  all  such 
interpretations.  On  the  other  hand,  consider  a  similar  sentence  Vx.x  =  6  D 
-‘LPx.  It  might  be  suspected  that  this  sentence  is  a  member  of  T,  but  it  is 
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not.  For  although  x  is  the  denotation  of  6,  it  may  also  be  the  denotation  of  a 
in  some  first-order  interpretation,  and  for  this  interpretation,  LPx  will  be  true. 
In  the  other  direction,  the  sentence  Vx.  LPx  D  x  —  a  is  in  T,  since  in  every 
model  respecting  T,  only  the  individual  named  by  a  will  make  LPx  true.  On 
the  other  hand,  Vx.  Px  D  x  =  a  is  not  in  T :  there  is  a  model  w  of  A  for  which 
Px  is  true  of  some  individual  x  ^  a. 

As  in  £,  in  qC  knowledge  of  properties  of  individuals  hinges  on  having  a  name  for 
that  individual.  The  expression  LPx  when  x  is  a  quantified-in  variable  says  that  the 
agent  believes  Pc  to  be  true  for  some  intensional  concept  c  whose  denotation  is  x. 
Using  the  above  example,  and  letting  a  stand  for  the  mayor,  6  for  the  chief  of  police, 
and  P  for  the  property  of  being  rich,  we  can  interpret  the  formal  results  as  follows. 
The  agent  has  a  belief  that  the  individual  described  as  “the  mayor”  is  rich,  and  so 
affirms  that,  if  x  is  that  individual,  LPx  is  a  belief,  because  under  at  least  one  of 
the  names  of  x  (namely,  a),  LPa  is  true.  On  the  other  hand,  the  agent  cannot  say 
that  he  disbelieves  that  the  individual  y  who  is  described  as  “the  police  chief”  is  rich 
because  this  individual  may  have  another  name  for  which  LPy  is  true,  that  is,  y  may 
also  be  the  mayor. 

These  observations  hold  for  arbitrary  extensions  containing  LPa  and  ~>P6,  and  we 
can  make  this  precise  by  introducing  the  meta-logical  sentence  <p\->  ip.  This  sentence 
is  true  just  in  case  whenever  <p  is  in  some  extension  (over  </£),  so  is  ip.  Similarly, 
<p  ip  means  that  there  exists  an  extension  containing  <p  that  does  not  contain  ip. 
Note  that  A  H  <p  is  stronger  than  saying  that  <p  is  an  AE-consequence  of  A,  since  A 
does  not  have  to  be  the  premise  set  of  an  extension,  only  included  within  it. 

PROPOSITION  4.4  Let  a,6  G  A f,  and  let.  fi(x)  be  any  first-order  formula  with  free 
variable  x.  The  following  statem.ents  are  true  of  any-name  sem.antics. 

Lfi(a)  H >  Bx.Lf>(x) 

L<p(a)  b->  Vx.x  =  a  D  L<p{x) 

~>L<p(a)  Vx.x=>a  D  ~>L<p(x) 

Vx.x  =  a  D  Lfi(x)  H  Ltp(a) 

Vx.  x  =  a  D  -'Ltp(x)  H*  ~>L<p{a) 

Vxi/.  x  =  y  D  {L<p(x)  =  L<p(y )) 

I/+  a  =  b  D  (L<p(a)  =  L<p{b)) 

Proof.  The  first  three  statements  can  be  proven  from  the  example  by  a 
simple  generalization.  For  the  fourth,  consider  an  interpretation  in  which 
Vx.  x=a  D  L<p(x)  is  true.  For  some  individual  k  such  that  u(n)  =  fc,  there 
is  a  name  b  for  k  such  that  L<p(b)  is  in  the  extension.  Since  extensions 
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are  stable  sets,  <f>(b)  is  in  the  extension,  and  since  v(a )  =  n(6),  so  is  <f>(a): 
and  hence  L<f>{a).  For  the  fifth  statement,  in  any  interpretation  there  is 
some  individual  k  for  which  u(a)  =  k,  and  since  ->L<b(x)  is  true  for  this 
individual,  4>(a)  cannot  be  in  the  extension,  and  so  -<L<f>(a)  is. 

The  sixth  statement  follows  directly  from  the  rule  of  interpretation  for 
modal  atoms  with  free  variables,  since  the  variables  refer  to  the  same  indi¬ 
viduals.  Finally,  the  example  furnishes  a  counterexample  to  the  inclusion 
of  the  last  sentence  in  all  extensions. 

Note  that  the  universal  statement  of  substitution  of  equal  individuals  in  a  modal 
context  is  in  every  extension,  but  its  substitution  instances  over  names  are  not.  The 
rule  of  instantiation  of  universal  quantifiers,  which  holds  for  first-order  logic,  is  not 
valid  in  quantified  AE  logic  with  any-name  semantics.  This  can  be  understood  by 
considering  the  subexpression  L<f>(x).  If  this  formula  is  asserted  positively  in  some 
sentence,  and  we  substitute  a  name  a,  we  are  not  sure  that  a  is  the  name  that  led 
to  the  evaluation  of  L<f>(x )  as  true,  since  there  could  be  many  such  names.  On  the 
other  hand,  if  L<f>( x)  occurs  negatively,  any  name  can  be  substituted,  since  any  such 
name  should  make  L<f>(x)  false.  The  moral:  substitution  of  a  particular  name  for 
x  into  positive  modal  contexts  is  not  a  valid  operation  within  extensions,  given  the 
any-name  semantics.  Substitution  is  valid  for  negative  modal  contexts,  since  ~^L4>{x) 
is  a  strong  statement  in  any-name  semantics:  there  is  no  name  a  such  that  L<f>(a)  is 
believed. 

Finally,  we  note  that  the  Barcan  formula  \/xL<f>(x)  D  LNx<f>(x)  is  true  in  every 
extension,  while  the  converse  LVx<t>{x)  D  VxL<f>(x)  may  be  false.  The  reason  for  the 
latter  is  that  even  though  every  individual  x  has  the  property  <f>,  some  individuals 
may  not  be  given  a  name  in  an  interpretation,  and  so  L<f>(x)  will  be  false.  By  the 
properties  of  stable  sets,  we  can  reduce  the  subexpression  LVx<f>(x)  to  Vxc/>(x)  in  these 
sentences. 

PROPOSITION  4.5  For  any-name  semantics, 

\/xL(f>(x)  H  Vx^(x) 

Vx<f>(x)  \f*  VxL(f>(x) . 

If  only  parameter  models  are  considered,  then  both  the  Barcan  formula  and  its  con¬ 
verse  are  in  every  extension. 

4.2  All-Name  Semantics 

An  alternative  scheme  for  reference  is  to  assume  that  L<f>(x)  is  true  in  case  the  ex¬ 
pressions  formed  by  substitution  of  all  names  for  an  individual  x  in  the  denotation 
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map  are  part  of  the  belief  set.  The  rule  for  interpretations  respecting  a  belief  set  (16) 
is  modified: 

All-name  semantics: 

w  respects  T  if  for  all  formulas  L<f>{x)  and  substitutions  xjk , 

w,x/k  j=  L<f>(x)  iff  for  every  name  t  E  Jf  such 

that  v(t)  =  k ,  <f>{t)  £  F. 

Proposition  4.1  remains  true,  and  all  extensions  are  still  stable  sets.  However,  some 
of  the  results  for  equality  and  substitution  are  reversed  from  any-name  semantics. 

PROPOSITION  4.6  Let  a,b  €  A",  with  (f>(x)  a  nonmodal  formula.  The  following 
statements  are  true  of  all-name  semantics. 

L(f>(a)  I f*  3x.Lf>{x) 

L<f>(a)  I f*  Vx.  x  =  aD  L<f(x) 

-> L<f>(a )  h*  Vx.  x  —  a  D  ~>L<f)(x) 

Vx.x  =  a  D  L<f>(x)  L(f>(a) 

Vx.  x  =  a  D  ->L<j>(x)  ->L<f>(a) 

Vxy.x  =  y  D  ( L<f>(x )  =  L<j>(y)) 

\f+a  =  bD  (L<t>{a)  =  L<f>(b)) 

Proof.  The  truth  of  these  statements  can  be  verified  using  the  same 
techniques  as  for  Proposition  4.4. 

Again,  the  rule  of  instantiation  is  not  valid  in  quantified  AE  logic,  but  with  all¬ 
name  semantics  the  reasons  are  opposite  from  any-name  semantics.  Here  the  positive 
statement  LP(x)  is  strong,  since  it  says  that  for  any  name  a,  L<f>(a)  must  be  true.  So 
substitution  of  a  particular  name  for  x  into  positive  modal  contexts  is  valid  within 
extensions  for  all-name  semantics.  Substitution  is  not  valid  for  negative  modal  con¬ 
texts,  since  -i L<f>(x)  just  means  there  is  some  name  for  x  that  the  agent  does  not 
connect  with  property  P,  and  for  any  particular  name  a,  L<f>(a)  may  be  a.  belief. 

The  results  on  the  Barcan  formula  (Proposition  4.5)  are  the  same  for  all-name 
semantics. 
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4.3  Unique-Name  Semantics 

A  specialization  of  the  any-name  and  all-name  semantics  is  to  let  each  member  of 
stand  for  a  unique  individual.  Unique  names  of  this  sort  are  called  “standard  names,” 
and  for  any  two  standard  names  we  have: 
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(19)  n;  ^  ny  iff  i  /  j  . 

The  rule  for  interpretations  respecting  a  belief  set  is: 

Unique-name  semantics: 

w  respects  F  if  every  name  in  X  refers  to  a  unique  individual 

(20)  in  U ,  and  for  all  formulas  L(j>(x)  and  substitutions  x/k, 

w,x/k  f=  L<f>(x)  iff  for  any  name  t  G  X  such 

that  v(t)  =  fc,  <f>(t)  G  T. 

Unique-name  semantics  merges  any-name  and  all-name  semantics,  since  there  is  ex¬ 
actly  one  name  for  each  individual.  Proposition  4.1  remains  true,  and  all  extensions 
are  still  stable  sets.  These  are  the  results  for  equality  and  substitution. 

PROPOSITION  4.7  Zei  n,u,-,ny  GX,  with  <f>(x)  a  nonmodal  formula.  The  following 
statements  are  true  of  unique-name  semantics. 

LPn  3x.L<f>[x) 

LPn  H ►  Vx.  x  =  n  D  L<f>(x) 

-‘LPn  H ►  Vi.  x  =n  D  ~>L<f>(x) 

Vx.  x  =  n  D  L<f>(x)  I— ►  LPn 

Vx.x  =  n  D  ~‘L<f>(x)  H *  -‘LPn 

H  Vxt i.x=y  D  (L<j)( x)  =  L<f>(y)) 

H  n{~nj  D  (L(j)(n{)  =  Z^(ny)) 


Proof.  The  truth  of  these  statements  can  be  verified  using  the  same 
techniques  as  for  Proposition  4.4. 

The  main  change  is  that  the  rule  of  instantiation  is  valid  for  unique-name  se¬ 
mantics,  as  long  as  only  standard  names  are  substituted  into  the  context  of  modal 
atoms. 

The  results  on  the  Barcan  formula  (Proposition  4.5)  are  the  same  for  unique-name 
semantics. 

4.4  A  Note  on  the  Modal  Predicate  Calculus 

We  have  chosen  a  semantic  approach  to  analyzing  quantifying-in  because  it  clearly 
shows  the  relation  between  assumptions  about  naming  individuals  and  self-beliefs.  It 
is  known  from  the  original  definition  of  AE  logic  [21]  that  a  proof-theoretic  version 
of  the  fixed-point  equation  (9)  exists;  this  fixed-point  can  be  expressed  in  terms  of 
deduction  in  the  modal  calculus  KA5,  or  weak  Sb. 


19 


Proposition  ([8],  3.6)  A  set  T  is  an  AE  extension  of  A  C  £  if  and  only  if  it 
satisfies  the  equation 

T  =  €  £  |  A  U  LT0  U  ~~>LTq  \~K45  , 

where  LT0  =  { L<f>  \  <f>  €  T  fl  £0}  and  -*LTo  =  {-‘Lfi  \  <j>  £  T  and  <f>  €  £0}.  This 
definition  can  be  extended  to  qC  by  using  the  first-order  version  of  the  calculus  if 45. 
However,  the  intuitions  we  have  developed  in  this  section  are  violated  by  the  proof- 
theoreitc  extensions  of  some  simple  AE  theories.  For  example,  let  A  =  {3 x.LPx}. 
This  theory  should  have  no  extension,  since  there  is  no  individual  c  €  fif  such  that 
Pc  is  derivable  from  A.  Yet  there  is  a  solution  to  the  fixed-point  equation.  Let  T0 
be  Cn();  then  the  if 45- consequences  of  A  U  LT0  U  -<LT 0  are  T0}  giving  a  fixed-point. 
T0  does  not  contain  3 x.Px,  and  so  T  contains  -^LBx.Px.  The  agent  does  not  believe 
that  there  is  any  individual  with  property  P,  yet  he  believes  that  he  believes  it. 
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5  Knowing  Who 

In  an  ordinary  epistemic  logic,  the  expression  3x.K<j>{x)  is  contrasted  with  I(3x.<f>(x). 
The  latter  is  meant  to  express  that  an  agent  knows  that  something  has  the  property  (f> , 
e.g,  the  agent  knows  that  somebody  is  rich,  without  necessarily  being  able  to  pick  out 
that  individual.  On  the  other  hand,  the  quantified-in  version  expresses  the  fact  that 
the  agent  has  a  particular  individual  in  mind  who  is  rich;  we,  the  observers,  represent 
this  fact  without  saying  who  the  individual  is.  The  formal  technique  was  originally 
suggested  by  Hintikka  [6],  and  in  the  AI  literature  there  are  many  examples:  Moore’s 
theory  of  knowledge  and  action  [20],  and  Levesque’s  approach  to  self-knowledge  in 
knowledge  bases  [11]  are  two  well-known  ones.  Levesque’s  work  is  especially  appro¬ 
priate  here:  he  points  out  that  the  expressions  3 x.L<f>(x)  and  L3x.<f>(x)  in  a  knowl¬ 
edge  base  differentiate  the  type  of  information  contained  in  it.  In  the  first  case,  the 
knowledge  base  has  information  about  a  particular  individual  with  property  </>;  in  the 
second,  it  just  has  the  information  that  some  individual  has  property  <j>. 

The  contents  of  the  knowledge  base  should  reflect  the  different  kinds  of  information 
present.  Since  Levesque  takes  knowledge  bases  to  be  described  by  collections  of 
sentences,  similar  to  the  belief  sets  of  AE  logic,  knowing  who  a  particular  individual 
is  depends  on  having  a  certain  type  of  name  for  the  individual,  often  called  a  standard 
name.  The  knowledge  base  knows  that  an  individual-has  the  property  4>  just  in  case 
the  expression  is  in  the  KB,  where  a  is  the  standard  name  for  the  individual. 
Suppose,  for  example,  that  we  take  an  individual’s  proper  name  to  be  a  standard  name 
(this  is  only  a  good  assumption  for  a  small  group  of  people,  which  is  why  social  security 
numbers  are  useful).  Then  Rich(John  Doe)  in  the  knowledge  base  counts  as  knowing 
of  the  individual  John  Doe  that  he  is  rich,  while  Rich(richest-man-in-the-worJd)  just 
means  that  the  knowledge  base  knows  someone  is  rich,  without  being  able  to  identify 
that  person. 

Using  standard  names  is  one  way  in  which  an  agent  can  identify  individuals,  but 
it  is  certainly  not  the  only  one.  We  have  argued  (in  [7])  that  an  appropriate  notion 
of  knowing  who  an  individual  is  is  that  the  agent  have  a  description  sufficient  to  pick 
out  the  individual  for  a  particular  task  in  a  particular  context.  For  example,  a  robot 
trying  to  go  through  a  doorway  in  front  of  it  needs  only  to  have  an  expression  of  the 
form  Ciosed(dl)  A  Door(cll)  A  Dist(dl,3ft)  in  its  knowledge  base  in  order  to  take  an 
appropriate  action  relative  to  the  door.  Having  a  standard  name  for  the  door  would 
require  too  much:  that  the  agent  be  able  to  distinguish  this  door  from  any  other 
known  door,  for  example. 

Just  what  constitutes  an  adequate  description  is  still  a  matter  of  research,  both 
in  the  study  of  epistemology,  where  it  has  a  long  tradition,  and  in  the  AI  and  com¬ 
puter  science  community.  Recent  work  of  interest  in  the  latter  are  the  proposals  of 
Lesperance  [10]  on  self-naming  and  Grove  and  Halpern  [5]  on  multi-agent  naming  and 
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reference.  Grove  and  Halpern  stress  the  importance  of  descriptive  names  (as  opposed 
to  standard  names)  as  a  way  of  identifying  particular  agents  in  context,  and  go  on 
to  give  a  theory  of  such  descriptions,  making  names  first-class  objects  in  his  modal 
language,  quantifying  over  them  and  introducing  predicates  for  describing  different 
types  of  names. 

We  will  not  subscribe  to  a  particular  theory  of  description  here,  since  we  want 
to  be  more  abstract  and  remain  compatible  with  different  theories.  But  general 
characteristics  of  a  description  theory  can  guide  the  choice  of  an  appropriate  semantics 
for  qL. 

1.  We  make  the  assumption  that  it  is  the  syntactic  form  of  the  name  in  an  expres¬ 
sion  such  as  P(a)  that  is  important  in  determining  whether  it  is  an  appropriate 
description  or  not.  For  example,  322-3646  is  an  appropriate  name  if  the  agent 
is  trying  to  dial  a  phone  number,  while  phone-num(Bill)  is  not,  since  the  agent 
may  not  know  the  digits  of  Bill’s  phone  number.  The  appropriateness  of  a  name 
is  task  and  context  dependent. 

2.  Different  appropriate  names  may  refer  to  the  same  individual,  without  an  agent 
knowing  whether  those  individuals  are  the  same  or  not.  This  is  especially  true 
if  the  names  are  used  in  different  contexts.  An  agent  might  use  the  name 
“mayor”  when  talking  to  the  phone  operator  and  trying  to  get  in  touch  with 
the  mayor;  he  might  use  the  term  “police  chief”  if  trying  to  get  in  touch  with 
that  individual.  These  are  appropriate  titular  names,  and  the  operator  knows 
how  to  connect  the  agent  with  the  right  person;  yet  the  agent  might  not  know 
whether  the  mayor  and  the  police  chief  are  the  same  individual.  As  we  have 
seen,  standard  names  do  not  satisfy  this  condition,  since  the  refer  to  unique 
individuals,  and  the  agent  knows  they  are  unique. 

3.  There  may  be  individuals  for  which  the  agent  has  no  appropriate  identifying 
names,  that  is,  the  names  do  not  cover  the  set  of  individuals  an  agent  can  have 
beliefs  about.  Also,  there  may  be  terms  for  individuals  that  do  not  count  as 
identifying  names  (e.g.,  Skolem  constants). 

How  do  the  proposed  semantics  for  quantified-in  AE  logic  meet  the  above  criteria? 
The  first  condition  is  the  hardest  one,  since  it  really  demands  a  theory  of  appropriate 
identifiers  for  individuals.  Since  we  do  not  want  to  complicate  qL  by  introducing 
names  as  objects  of  the  domain  and  subscribing  to  a  particular  theory  of  description, 
the  best  that  can  be  done  is  to  use  the  facilities  of  the  language  specification  to  select  a 
set  of  terms  AT  that  approximate  the  appropriate  identifiers  for  a  class  of  applications. 

All  of  the  semantics  use  the  names  in  J\f  as  identifying  names  for  individuals.  If 
we  do  not  make  the  parameter  interpretation  assumption  (i.e. ,  that  all  individuals  are 
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referred  to  by  names  in  Af),  then  the  models  of  qC  may  have  unnamed  individuals. 
Also,  if  Af  is  not  coextant  with  the  set  of  all  terms,  then  some  terms  for  individuals  do 
not  count  as  identifying  those  individuals,  thus  satisfying  the  third  condition.  There 
may  be  some  cases  in  which  we  have  a  restricted  domain  and  can  name  all  individuals 
with  Af,  but  in  general  we  will  have  to  deal  with  the  problem  of  “open”  domains. 

The  any-name  and  all-name  semantics  fulfill  second  condition,  while  the  unique- 
name  semantics  does  not.  The  unique-name  semantics  is  essentially  the  same  as  using 
standard  names.  In  special  cases  standard  names  are  appropriate,  e.g.,  it  is  possible 
to  tell,  for  any  two  telephone  numbers,  whether  those  numbers  are  the  same  or  not 
(actually,  even  this  case  is  not  strictly  correct:  there  can  be  multiple  numbers  that 
ring  at  the  same  location,  as  in  large  customer  service  operations). 

The  most  appropriate  semantics,  from  a  representational  point  of  view,  appears 
to  be  any-name  semantics.  The  results  of  the  rest  of  this  paper  are  for  this  semantics. 
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MIN  Theories 


One  of  the  uses  of  quantifying-in  is  to  specify  minimization  over  known  instances  of 
a  predicate.  We  now  examine  a  particular  class  of  AE  theories  that  can  serve  this 
purpose;  they  are  called  MIN  theories.  Any  such  theory  has  the  form 

(21)  A  (J  {Vx^LPiX  D  - PiX )}  , 

i 

where  A  is  a  set  of  first-order  sentences  and  the  Pi  are  a  sequence  of  unary  predicates.2 
We  write  M(W;  P,)  to  indicate  the  MIN  theory  of  W  over  the  predicates  P,-.  The  idea 
behind  MIN  theories  is  to  select  AE  valuations  in  which  every  individual  not  known 
to  have  the  property  Pi  does  not  have  this  property,  i.e.,  to  minimize  the  extension 
of  each  P;. 

Before  describing  the  properties  of  MIN  theories,  we  need  the  following  result  on 
a  reduced  fixed  point  form  for  their  kernels.  Define  Atoms(A/’;  Pi)  to  be  the  set  of  all 
ground  atoms  of  the  form  P;(a),  with  a  €  N '. 

PROPOSITION  6.1  S  is  the  kernel  of  an  extension  o/M(A;P,-)  if  and  only  if 


S  ={<{>£  £0  |  M(A;  P{)  [— SnAtoms{Af;Pi)  <^} 


Proof.  By  Proposition  4.3,  5  is  a  kernel  of  a  MIN  theory  iff 
S  =  {(f>€£0  |M(A;P.)  (=s  <£}  . 

Since  the  only  modal  atoms  in  M(A;  P,-)  are  of  the  form  PP,-.t,  the  only 
sentences  of  S  relevant  to  the  truth  of  these  atoms  are  of  the  form  Pi(a) 
for  a  6  Af. 

A  set  S  H  AtomslW;  P.)  satisfying  the  equation  above  is  called  an  atom  base  of  the 
theory  M(A;P). 

EXAMPLE  6.1  Let  j\f  —  {ai,a2,-  and  A  =  S  =  {Pui}.  Every  interpretation  vj 
respecting  S  which  satisfies  M(A;  P)  makes  Px  true  for  a*  =  u(ai),  and  false  for 
every  other  x.  Thus,  if  we  define  T  by 

T  —  {4>  G  Co  M(A;  P)  \=sd>}  , 

2 All  results  of  this  section  can  be  readily  extended  to  predicates  of  arity  greater  than  one. 
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it  is  clear  that  T  =  Cn(Vx.Px  =  x  =  ai).  Since  S  —  T  C]  Atoms^;  P),  T  is  the 
kernel  of  an  extension  of  M(A;  P).  There  are  no  other  kernels,  since  no  other 
atoms  Pa-i  can  be  deduced  from  M(A,P). 

Let  A  =  {Paj  V  Pa2},  and  as  before  let  S  =  {Pa ]}.  Again  we  can  show  that  ev¬ 
ery  valuation  w  respecting  S  and  satisfying  M(A;P)  satisfies  T  =  Cn(Vx.Px  = 
x  =  aj),  and  so  T  is  the  kernel  of  an  AE  extension  of  M(A;  P).  In  this  case  the 
kernel  is  not  unique;  there  is  another  one  Cn(Vx.Px  =  x  =  a2).  The  sentence 
(Vx.Px  =  x  =  aj)  V  (Vx.Px  =  x  =  a2)  is  an  A E- consequence  of  M(A;  P). 

Let  A  =  {BxPx},  and  let  S  —  {Peti}.  Again  we  can  show  that  every  valuation  w 
respecting  S  and  satisfying  M(A;  P)  satisfies  T  =  {Vx.Px  =  x  =  aj},  and  so  T  is 
the  kernel  of  an  extension.  But  the  choice  of  the  constant  dj  was  arbitrary,  and 
we  can  use  any  other  constant  in  defining  S  and  T.  Hence  there  are  an  infinite 
number  of  extensions  of  M(A;  P);  the  sentence  EHx.Px  is  an  AE-consequence  of 
M(A;P). 

These  examples  are  very  suggestive  of  a  correspondence  between  MIN  theories 
and  the  minimal  models  of  A.  But  we  must  define  what  we  mean  by  minimal  models, 
and  there  are  several  choices.  First  we  assume  that  the  extensions  of  all  predicates 
other  than  the  Pi  can  vary  across  compared  models.  In  the  next  section  we  consider 
the  case  of  fixed  predicates.  Second,  we  must  choose  whether  to  allow  the  universe 
and  denotation  function  of  comparable  models  to  be  different.  As  we  will  see  in  the 
section  on  equality  reasoning  (7.3),  the  minimization  of  MIN  theories  is  somewhere 
between  having  a  fixed  and  varying  denotation  function.  Also,  the  extensions  of 
M(A;P)  characterize  minimal  models  that  have  a  parameter  cover  of  the  predicate 
P:  in  every  such  model,  the  individuals  with  the  property  P  are  all  named  in  A f . 
This  is  what  the  expression  Vx.  Px  D  LPx  means:  if  any  individual  has  the  property 
P,  it  is  believed  to  have  it,  i.e.,  it  has  a  name  a  and  Pa  is  in  the  belief  set. 

PROPOSITION  6.2  Let  V  be  an  atom  baseforM(A)P).3  Every  model  w  o/M(A;P) 
respecting  V  has  a  parameter  cover  of  P,  and  for  every  a  £  A f , 

w\=Pa  iff  Pa£V. 

Proof,  w  has  a  parameter  cover  for  P  because  if  w^x/k  j=  Px  for  some 
individual  k,  then  by  Vx.  Px  D  LPx  and  xu  respecting  V  there  must  be  a 
predicate  Pa  of  V  such  that  a  €  Af  and  v(a)  =  k.  Similarly,  if  w  J=  Pa 
then  Pa  must  be  in  V.  Now  suppose  that  Pa  6  V  for  some  a  £  J\f .  This 
means  LPa  is  in  the  extension,  and  so  is  Pa  since  it  is  a  stable  set;  hence 
w  j=  Pa. 

3Note:  we  will  often  use  a  single  minimized  predicate  P  in  propositions  in  the  rest  of  this  paper 
for  clarity;  the  addition  of  multiple  predicates  causes  no  significant  changes  in  the  proofs. 


26 


The  set  of  ground  atoms  Pa  such  that  a  £  Jf  and  w  | =  Pa  is  called  the  P-cover 
of  w.  The  P-cover  is  analogous  to  a  Herbrand  model  for  A,  except  that  it  is  only 
for  the  positive  part  of  the  predicate  P,  and  the  parameters  can  refer  to  the  same 
individual.  In  the  same  way  that  minimal  Herbrand  models  are  taken  as  a  semantics 
for  logic  programs,  we  consider  models  of  A  that  have  a  subset-minimal  P-cover. 
These  minimal  P-covers  determine  the  extensions  of  M(A;  P). 

PROPOSITION  6:3  Let  A  be  a  set  of  first-order  sentences.  A  set  V  is  an  atom  base 
ofM(A;P)  if  and  only  if  it  is  a  minimal  P-cover  for  A. 

Proof.  Let  V  be  a  minimal  P-cover  for  A ,  and  define  S  by 

S  =  {<j>  £  Co  I  M(A;  P)  K  <t>)  ■ 

We  know  that  S  fl  Atoms(jV;  P)  C  1/,  since  by  definition  there  is  a  model 
of  A  that  makes  V  true,  but  no  other  ground  P  atoms.  To  show  that  S 
contains  V,  suppose  to  the  contrary  that  for  some  Pa  £  V,  Pa  is  not  in 
S.  Then  there  is  a  model  w  that  makes  V  —  {Pa}  true,  but  no  other  P 
atoms,  since  Vx.Px  D  LPx  forces  all  P  atoms  not  in  V  to  be  false.  But 
we  assumed  V  was  a  minimal  P- cover  of  A,  which  w  contradicts. 

For  the  converse,  let  S  be  an  extension  of  M(A;P)  with  atom  base 
V  =  S  fl  Atoms(W;P).  V  is  a  P-cover  of  A,  since  by  Proposition  6.2 
there  is  a  model  w  of  A  with  a  parameter  cover  of  P,  such  that  V  is  the 
set  of  P  atoms  true  in  w.  To  show  that  V  is  a  minimal  P-cover,  assume 
that  there  is  some  model  w'  of  A  with  a  parameter  cover  of  P  whose  P- 
cover  is  a  proper  subset  of  V.  Because  A  is  first-order,  we  can  choose  w' 
to  respect  V.  Then  we  have: 

w'  \=v  M (A;  P) , 

and  hence  {<j>  |  M(A;P)  \=v  <j> }  does  not  contain  all  of  V,  contradicting 
the  assumption  that  V  is  an  atom  base  of  M(A;  P). 

COROLLARY  6.4  The  AE-consequences  o/M(A;P)  are  those  sentences  true  in  the 
minimal  P-cover  models  of  A. 

Because  extensions  of  MIN  theories  depend  on  the  presence  of  minimal  P-covers, 
first-order  theories  without  such  covers  will  have  no  extensions.  This  is  analogous 
to  the  case  of  circumscription,  in  which  theories  with  no  minimal  models  fail  to 
have  a  consistent  circumscription.  The  following  example  (from  [3])  illustrates  this 
correspondence. 

Example  6.2  Let  A  be  the  set 
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3x.  Nx  AVy.[Ny  Z)  x  sy] 

Vx.  Nx  D  Nsx 
Vxy.sx^sy  D  x  =  y . 

Let  Af  —  {0,s0,s.s0, sssO,  •  •  •}.  Any  model  of  A  that  is  a  parameter  cover  for 
A  has  an  A-cover  of  the  form  {s‘0,  s*+10,s,+20,  •  •  •}.  There  are  no  minimal  A- 
covers,  and  hence  no  extensions  of  A.  Similarly,  the  circumscription  of  A  with 
respect  to  A  is  inconsistent,  because  there  are  no  A-minimal  models  of  A. 

On  the  other  hand,  consider  the  skolemization  of  A  (call  it  A '): 

AO  A  Vy.  [Ny  D  0  ^  sy] 

Vx.  Nx  D  Nsx 
Vxy.  sx  =  sy  D  x  —  y . 


This  theory  does  have  one  minimal  A-c over,  namely  {AO,  AsO,  AssO,  ■  -  ■},  so 
there  is  one  extension,  all  of  whose  models  are  isomorphic  to  the  natural  num¬ 
bers,  with  0  as  interpreted  as  zero  and  s  as  successor.  Similarly,  the  circum¬ 
scription  of  A!  with  respect  to  A  has  just  these  models. 
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7  Representational  Issues 

We  can  use  the  results  of  the  previous  section  to  state  defaults  about  knowing  all  the 
members  of  a  class,  about  knowing  all  the  members  of  a  domain,  and  about  equality 
among  individuals. 

7.1  Comprehensive  Class  Knowledge 

Suppose  we  would  like  to  state  that  the  only  members  of  a  class  are  the  ones  we 
believe  to  be  in  the  class,  that  is,  our  knowledge  of  the  class  is  comprehensive.  For 
example,  we  might  want  to  make  the  assumption  that  if  we  don’t  know  of  any  block 
on  top  of  block  i?,  then  B  is  clear.4  Using  £,  we  could  add  the  default 

On(a,B)  D  LOn(a,B) 

for  every  term  a  in  the  language.  But  although  this  will  enable  us  to  conclude 
~'On{a^B)  for  every  term,  it  will  not  sanction  the  generalization  Vz.  -'On(x,  B).5 

In  qC,  we  can  use  quantifying-in  to  refer  to  every  individual  in  the  domain  inside 
the  belief  operator: 

(22)  Vi.  Od(x,B)  D  LOn(x,B) , 

which  is  just  the  theory  M(A;  A(x)On(:E,I?))  for  empty  A.  From  Corollary  6.4,  we 
know  that  the  sentences  that  are  AE-consequences  of  M(A;  A(ar)On(:r,  B))  are  just 
those  in  the  minimal  On(*,i?)-covered  models  of  A.  In  every  such  model,  there  is  no 
individual  on  5,  and  so  Va:.->On(x,  B)  is  an  AE-consequence  of  the  theory. 

In  general,  if  only  a  finite  set  of  atoms  Pa-y,  Pa2,  ■  ■  •  Pan  are  provable  in  a  theory 
A,  then  an  AE-consequence  of  M(A;  P)  will  be  Vs.  Px  D  (x  —  a^x  =  a2V-  •  -Vx  =  an ). 
For  a  theory  A  that  implies  an  infinite  set  of  ground  atoms,  the  AE-consequences  will 
depend  on  the  structure  of  A.  For  example,  if  A  asserts  that  all  members  of  Af  have 
the  property  P,  then  ->3 x.->Px  will  be  an  AE-consequence  of  M(A;  P). 

It  is  also  possible  for  an  agent  to  express  incomplete  knowledge  of  class  membership 
in  </£,  with  the  statement 

(23)  3.t.  4>(x)  A  ->L<f>(x) . 

Here  there  is  an  individual  who  is  in  the  class  <f)  but  who  is  not  known  to  be  by  the 
agent. 

4This  example  is  taken  from  [18];  the  inadequacy  of  default  logic  (and  thus  AE  logic  over  £)  for 
this  problem  has  been  discussed  in  [15,  16,  22]. 

5That  is,  unless  we  also  assume  parameter  interpretations,  which  in  general  we  do  not  want  to 
do,  since  it  requires  giving  a  name  to  every  individual  in  the  domain. 
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Generally  an  agent  may  not  know  either  of  (22)  or  (23).  For  example,  consider 
the  simple  premise  set  {Fa}-  There  is  a  single  extension  whose  kernel  is  Cn(Pa),  and 
using  the  any-name  semantic  equations  we  find 

-■ZfElx.  <f>{x)  A  ->ii?i( a;)] 

~'L[\/x.<f>(x)  D  L<f>(x )]  . 

are  both  in  the  extension. 

7.2  Domain  Closure  and  Domain  Circumscription 

The  domain  closure  assumption  is  similar  to  that  of  parameter  interpretations:  every 
element  of  the  domain  is  represented  by  a  term,  but  the  terms  need  not  refer  to  unique 
individuals.  In  first-order  logic,  the  domain  closure  assumption  can  be  expressed  for 
finite  sets  of  terms  by  the  sentence 

(25)  Vx.  x  =aj  V  x  —  a?  •  •  •  V  x  =  an  . 

There  is  no  first-order  sentence  to  express  domain  closure  for  a  countably  infinite  set 
of  terms.  We  can  do  this  in  qC,  however. 

PROPOSITION  7.1  If  A  is  a  set  of  nonmodal  sentences,  A  U  {Vx.L(x=x)}  has  a 
single  extension  whose  kernel  is  the  set  of  all  first-order  sentences  tmie  in  models 
of  A  whose  domains  are  covered  by  A f. 

Proof.  Let  W  be  the  set  of  models  of  A  with  the  domain  cover  assump¬ 
tion,  and  let  S  =  {<f>  6  £o  |  W  (=  <$>}■  We  want  to  show  that 

S  =  {<j>  E  £0  \  A  U  {Vx.T(x  =  x)}  (=5  <j> } . 

The  only  effect  Vx.T(x  =  x)  has  is  to  restrict  the  models  of  A  to  those 
with  a  domain  cover.  Since  S  is  precisely  the  set  of  sentences  true  in  such 
models,  the  equation  holds. 

If  the  set  Af  is  finite,  then  Vx.T(x  =  x)  is  equivalent  to  (25).  If  Af  is  infinite,  then  all 
models  respecting  Vx.T(x  =  x)  have  domains  that  are  countably  infinite  or  less.  The 
effect  of  this  depends  on  the  first-order  axioms  A.  For  example,  if  A  =  {Pa\ ,  Pa^,  •  • 
for  every  name  a,-  €  Af,  then  the  extension  of  A  and  Vx.T(x  —  x)  contains  Vx.Px, 
which  is  not  a  first-order  consequence  of  A. 

This  last  example  exhibits  a  phenomenon  first  noticed  by  Levesque  [12] ,  that  the 
kernel  of  an  extension  in  qC  does  not  necessarily  completely  determine  the  extension. 
This  is  unlike  the  case  for  £,  in  which  different  extensions  must  have  different  kernels 
([21]).  To  see  how  this  is  so,  consider  the  case  above  in  which  A  asserts  Pa  for 
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every  name  a  6  Af.  Let  us  suppose  also  that  all  individuals  (named  or  not)  have 
the  property  P,  so  that  Va :.Px  is  also  in  A.  By  Proposition  4.1,  A  has  a  unique 
extension  with  Cn(A)  as  its  kernel.  This  extension  contains  s  =  -'L[V.'r.  Px  3  LPx], 
since  if  there  are  any  unnamed  individuals,  they  have  the  property  P  without  the 
agent  knowing  it  (see  the  discussion  leading  up  to  Equation  (24)).  Now  consider  the 
theory  M(A;  P).  By  Corollary  6.4,  there  is  a  single  extension  of  M(A;P),  since  there 
is  exactly  one  minimal  set  of  P-atoms  over  Af.  The  first-order  A  E-consequences  of  A! 
are  exactly  the  same  as  those  of  A ,  namely  Cn(A).  So  we  have  two  AE  theories  with 
the  same  kernels,  but  differing  in  their  modal  sentences:  in  one,  the  agent  has  a  name 
for  all  P-individuals,  and  in  the  other,  he  does  not  know  if  he  does.  This  difference  is 
a  reflection  of  the  increased  expressive  power  of  qC  relative  to  first-order  logic,  since 
no  first-order  axioms  can  characterize  countable  models,  but  MIN  theories  can. 

We  can  also  express  a  kind  of  domain  circumscription  in  qC,  by  minimizing  the 
inequality  in  the  models  of  a  theory.  If  A  is  a  set  of  nonmodal  sentences,  this  is 
expressed  by  M(A;  A  (x,y)x  ^  y).  According  to  Co  roll  ary ‘6. 4,  the  AE-consequences  of 
this  theory  are  just  the  sentences  true  in  all  the  minimal  ^  -cover  models  of  A.  In 
such  models,  since  any  two  distinct  individuals  are  unequal,  every  individual  must 
have  a  name,  that  is,  they  must  be  parameter  models. 

EXAMPLE  7.1  Let  A  —  {a^b}.  In  every  parameter  model  of  A  minimal  in  inequal¬ 
ity  statements,  each  element  must  be  equal  to  a  or  to  b.  Hence  Vz.  x  =  a  V x  —  b 
is  an  A  E-consequence  of  M(A;  A(z,  y)x  ^  y)- 

Let  A  =  {a^6  V  {a^cAa^dA  d)}.  Now  there  are  two  minimal  sets  of 
inequality  statements,  and  thus  two  extensions,  one  restricted  to  domains  of 
cardinality  two,  and  one  to  domains  of  cardinality  three. 

7.3  Reasoning  about  Equality 

It  lias  been  rioted  (see  [3])  that  in  its  original  formulation,  circumscription  of  a  pred¬ 
icate  does  not  allow  any  conclusions  about  equality  to  be  made  that  are  not  present 
in  the  original  theory.  This  is  because  only  interpretations  with  the  same  denotation 
function  and  domain  are  compared.  As  a  consequence,  reasoning  about  defaults  some¬ 
times  turn  out  to  be  counterintuitive.  The  following  example  uses  the  abnormality 
predicate  proposed  by  McCarthy  [19]. 

EXAMPLE  7.2  Consider  a  simple  abnormality  theory,  with  A  —  {Vz.Pz  A  -’ab(z)  3 
Qx,  Pa,  ~,Qb}.  We  would  expect  Qa  to  be  a  consequence  of  minimizing  P 
(while  allowing  Q  to  vary),  but  it  is  not.  The  reason  is  that  there  are  ab- 
minimal  models  of  A  in  which  b  and  a  refer  to  the  same  individual,  and  ->Qa  is 
true. 
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In  more  recent  versions  of  circumscription  [13],  terms  are  also  allowed  to  vary  their 
denotation  across  interpretations  being  compared.  In  this  case,  the  example  above 
has  Qa  as  one  of  its  consequences.  However,  there  are  also  cases  where  allowing  terms 
to  vary  leads  to  undesirable  results. 

EXAMPLE  7.3  Consider  a  simple  abnormality  theory  with  A  —  {Vx.Px  A  -'ab(x)  D 
Qx ,  a b(a),  ab(b)}.  In  this  case,  a  —  b  is  a  consequence  of  minimizing  P  while 
allowing  Q  and  a,  b  to  vary.  The  reason  is  that,  if  we  allow  interpretations  with 
different  denotations  for  a  and  b  to  be  comparable,  the  interpretations  in  which 
a  and  b  are  identical  are  obviously  minimal  in  a b. 

From  the  above  example,  it  seems  that  allowing  terms  to  vary  leads  to  the  danger  of 
unexpected  identification  of  terms,  at  least  if  we  do  not  have  axioms  that  explicitly 
say  that  differing  terms  refer  to  different  individuals.  We  would  like  to  treat  equality 
among  terms  somewhat  in  between  the  two  extremes  of  fixed  and  varying  denotations: 
to  remain  agnostic  about  the  equivalence  of  terms,  but  still  be  able  to  draw  basic 
default  conclusions. 

The  comprehensive  class  axioms  have  a  similar  effect  to  minimizing  the  extent 
of  a  predicate,  but  they  allow  new  conclusions  about  equality  to  occur.  Since  the 
minimization  is  partially  based  on  the  presence  of  sentences  in  the  belief  set,  they  do 
not  necessarily  force  identification  of  terms. 

EXAMPLE  7.4  Redoing  Example  7.2,  let  A  =  {Vx.Px  A  -^ab(x)  D  Qx,  Pa,  ~'Qb}, 

and  assume  a,  b  €  W.  There  is  one  extension  of  M(A;  P),  with  kernel  Cn(A,  Va;.  Px  D 
x  =  a,  a^b}.  The  conclusion  that  a  and  b  are  different  individuals  is  not  deriv¬ 
able  from  A  alone. 

For  the  abnormality  theory  A  =  {Vx.Px  A  -'ab(i)  D  Qx,  ab(a),  a b(b)},  there 
is  again  a  single  extension  of  M(A;P)  with  kernel  Cn(A,  Vx.  ab(x)  D  (x  =  a  V 
x  =  b )).  There  is  no  conclusion  about  the  equality  or  inequality  of  a  and  b. 

The  comprehensive  class  axiom  is  thus  intermediate  between  a  fixed  and  varying 
interpretation  of  equality,  and  seem  to  be  the  right  level  of  variation  for  commonsense 
reasoning  in  abnormality  theories. 

Another  type  of  default  about  assumption  about  equality  is  the  unique  names 
assumption  (important  in  the  theory  of  deductive  databases  [25]  and  logic  program¬ 
ming  [1]).  In  its  most  basic  form,  it  asserts  that  all  terms  denote  unique  individuals, 
i.e.,  it  is  the  assumption  of  Herbrand  models,  without  necessarily  having  a  term  for 
every  individual.6  The  unique  name  assumption  is  usually  axiomatized  by  including 
all  sentences  of  the  form 

6Clark  [1]  gives  a  more  complex  notion  of  unique  names,  in  which  all  constants  and  functions 
have  their  free  interpretation.  We  have  not  tried  to  formalize  this  interpretation  in  qC. 
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(26)  a,-  aj  for  i  j &  j  . 

We  can  formalize  a  default  interpretation  of  the  unique  names  assumption  by  min¬ 
imizing  equality.  For  any  first-order  theory  A,  the  AE  theory  M(A,=)  has  as  its 
consequences  all  sentences  true  in  the  minimal  =-cover  models  of  A. 

EXAMPLE  7.5  Let  A  —  {ct]  =  a2).  In  every  model  of  A  minimal  in  equality  state¬ 
ments,  each  name  of  Af  —  {a,  b }  must  be  unequal  to  every  name  in  M .  Hence 
is  an  AE-consequence  of  M(A;=)  whenever  ij^j  and  i  and  j  are  not 
both  1  or  2. 

Recently  Rathmann  and  Winslett  [23]  have  proposed  a  different  type  of  circum¬ 
scription,  using  the  concept  of  homomorphism  to  compare  models.  They  use  this 
technique  to  form  a  type  of  equality  circumscription,  in  which  distinct  terms  are  as¬ 
sumed  to  designate  distinct  individuals  whenever  possible.  They  are  able  to  show 
that  the  unique  name  axioms  are  present  in  the  equality  circumscription  of  a  theory 
T  whenever  T  contains  no  positive  instances  of  the  equality  predicate. 
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8  Fixing  Predicates 

We  extend  MIN  theories  by  adding  a  set  of  predicates,  the  fixed  predicates,  to  the 
original  definition.  A  MIN  theory  now  has  the  form 

A  Ui  {Vx(-^LP{X  D  ~‘Pix)} 

(27)  Ui  {Vx(->LQjx  D  ~'Qjx)} 

U,-  {Vx(-iL->QjX  D  QjX )}  , 

where  the  Pi  and  Qj  are  sequences  of  predicates.  We  write  M(A;  P,-;  Qj)  to  indicate 
the  MIN  theory  of  A  over  the  predicates  Pi  with  Qj  fixed. 

There  is  a  reduced  fixed  point  equation  for  MIN=  theories  that  is  similar  to  Propo¬ 
sition  6.1.  Let  Lits(A;  P^;  Qj)  stand  for  the  set  of  atoms  P,a  and  literals  Qja ,  —>Qjd  for 
all  a  £  fif.  These  are  the  literals  important  in  defining  the  fixed  point  of  M(A;  p;  Qj). 

Proposition  8.1  S  is  the  kernel  of  an  extension  o/M(J4;p;  Qj)  if  and  only  if 


S  =  {<f>e  C0  |  M(A;  P,-;  Qj)  f=snLiu(.V;Pi;<?j)  <f>} 

Proof.  By  Proposition  4.3,  S'  is  a  kernel  of  a  MIN~  theory  iff 
S  =  {<f>  €  £0  \  M(A;  Pi]  Qj)  [=5  <f>}. 

Since  the  only  modal  atoms  in  M(A;  P;;  Qj)  are  of  the  form  LPiX ,  LQjX , 
and  L-iQjX,  the  only  sentences  of  S  relevant  to  the  truth  of  these  atoms 
axe  of  the  form  P,a,  Qja,  and  -i Qja  for  a  €  M. 

Note  that,  to  fix  Q,  both  Q  and  its  negation  ->Q  are  minimized.  In  general  this 
will  lead  to  multiple  extensions  in  which  various  combinations  of  Qx  and  ->Qx  hold 
for  each  individual  x. 

EXAMPLE  8.1  Let  A  =  {->Pa  3  Qa}.  The  MIN  theory  M(A;P;<5)  has  two 
classes  of  extensions:  one  class  contains  {-<Pa,Qa},  while  the  other  contains 
{Pa,~<Qa}.  Thus  the  minimization  of  P  does  not  force  the  acceptance  of  Qa  in 
every  extension.  The  presence  of  a  fixed  Q  actually  creates  an  infinite  number 
of  extensions  because  of  the  presence  of  the  countable  set  N  of  names  in  C. 

One  consequence  of  the  any-name  semantics  is  that  fixing  any  predicate  causes 
every  element  of  the  domain  to  be  named  by  A/",  since  any  element  in  either  the 
positive  or  negative  extent  of  a  predicate  must  have  a  name.  Further,  every  extension 
is  saturated  in  the  fixed  predicates,  that  is,  either  Qa  or  -> Qa  is  in  the  extension  for 
every  name  a  €  Af. 
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PROPOSITION  8.2  Let  S  be  the  kernel  of  an  extension  of  M(A;  Pi]  Qj).  Any  inter¬ 
pretation  w  of  M(A;  Pi]  Q j)  respecting  S  is  a  parameter  model  over  Af .  S  is 
saturated  with  respect  to  the  predicates  Qj. 

Proof  Suppose  w  is  not  a  parameter  model.  Then  there  is  some  element 
e  of  the  domain  such  that  e  is  not  denoted  by  any  name.  Thus  both 
-'LQjX  and  ->L-^QjX  are  true  for  x  =  e,  and  this  leads  to  the  contradiction 
QjX  A  -'QjX  for  x  —  e. 

To  show  S  is  saturated,  assume  it  is  not  for  some  Qj.  Then  there 
is  some  c  (z  N  such  that  QjC  and  _iQic  are  n°t  in  S.  Then  there  is 
some  individual  x  for  which  -> LQjX  and  ->L^QjX  hold,  which  leads  to  a 
contradiction. 
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9  MIN“  Theories 


The  equality  predicate  can  be  fixed,  just  as  any  other  predicate.  We  single  out 
the  class  of  MIN  theories  M(A;.P;  =  )  as  interesting  because  they  can  be  related  to 
minimal  models  of  P\  we  call  these  MIN"  theories.  Our  main  result  is  that  the 
extensions  of  a  MIN"  theory  of  A  axe  just  the  sentences  true  in  all  countable  P- 
minimal  models  of  A.  The  proof  is  somewhat  lengthy,  and  we  defer  it  to  the  end  of 
this  section,  first  pointing  out  the  significance  and  limitations  of  the  result. 

THEOREM  9.1  Let  A  be  a  set  of  first-order  sentences  not  containing  a  countably 
infinite  number  of  names  from  M .  The  first-order  sentences  S  true  in  evei'y  ex¬ 
tension  ofM.(A]P;=)  are  exactly  those  true  in  the  countable  P-minimal  models 
of  A. 

Remarks.  This  result  shows  that  MIN“  theories  are  closely  related  to  minimization 
over  countable  model  structures.  Schlipf  [26]  gives  some  useful  results  for  this  type 
of  minimization.  First,  the  question  of  whether  an  arbitrary  finite  first-order  A  has  a 
countably  infinite  minimal  model  is  Sj,  and  the  question  of  whether  a  formula  holds 
in  all  countable  minimal  models  is  II^-  These  complexity  classes  are  much  worse  than 
the  undecidability  of  first-order  logic;  there  can  be  no  complete  proof  theory  for  qC. 

A  second  result  from  Schlipf  is  that  entailment  over  minimal  countable  structures 
is  not  equivalent  to  entailment  over  all  structures  (unlike  ordinary  first-order  entail¬ 
ment,  which  is  reducible  to  entailment  in  countable  structures).  He  gives  an  example 
(Example  3,  p.  93)  of  a  first-order  theory  that  has  minimal  uncountable  models,  but 
no  minimal  countable  ones.  Most  of  the  theories  we  are  concerned  with  in  AI  will 
not  have  this  complex  a  structure,  however,  and  we  can  usually  be  satisfied  with 
entailment  in  minimal  countable  structures.' 

Given  this  caveat  about  countable  structures,  we  can  explore  the  relationship 
between  predicate  circumscription  and  autoepistemic  logic  with  any-na.me  seman¬ 
tics.  The  semantics  of  the  second-order  circumscription  schema  Circum(A;  P,-;  Zj) 
is  a  second-order  formula  characterizing  the  P,-minima.l  models  of  A,  allowing  all 
predicates  Zj  to  vary  (see  [14]).  Thus,  assuming  Zj  axe  all  the  predicates  of  A  ex¬ 
cept  Pi,  the  first-order  consequences  of  circumscription  over  countable  models  are  the 
AE-consequences  of  a  corresponding  MIN“  theory  M(A;P;=);  that  is,  given  that  fif 
contains  an  infinite  set  of  names  not  used  by  A. 

From  the  results  of  [2],  we  know  that  fixed  predicates  are  inessential,  and  that 
any  circumscription  involving  fixed  predicates  can  always  be  reduced  to  one  with¬ 
out.  For  example,  the  circumscription  Circum (A;  Pr,  Zj)  with  Q  £  Zj  is  equivalent 

'An  interesting  subclass  are  the  universal  theories;  it  is  an  open  question  whether  minimal  en¬ 
tailment  for  these  theories  reducible  to  minimal  entailment  over  countable  models. 
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to  Circum(A  A  Q'  =  -iQ;  Pi,  Q,  Q'\  Zj),  where  Q'  is  a  new  predicate  constant.  The 
corresponding  construct  for  MIN~  theories  is  to  fix  Q  using  M(A;  =,  Qf)  (note 
that  there  is  no  need  to  introduce  a  new  predicate  constant  for  ->Q),  Hence  the  first- 
order  consequences  of  parallel  predicate  circumscription  with  fixed  predicates  over 
countable  models  are  given  by  the  corresponding  MIN=  theory. 

We  now  turn  to  the  proof  of  the  theorem.  First  we  develop  the  result  that  a 
first-order  sentence  is  true  in  the  P-minimal  parameter  models  of  A  just  in  case  it  is 
true  in  every  extension  of  M(A;  P;  — ).  Then,  we  show  that  parameter  models  are  a 
sufficient  semantics  for  minimal  entailment  over  all  countable  models. 

For  any  parameter  model  w  of  A  (over  jV),  call  a  P -diagram  of  A  the  set  of  ground 
P  atoms  and  ground  equality  literals  over  jV  that  are  true  in  w.  A  P-diagram  D  is 
minimal  if  there  is  no  other  diagram  with  the  same  equality  literals  whose  P  atoms  are 
a  subset  of  D’s.  We  first  show  that  any  minimal  P-diagram  of  A  picks  out  a  unique 
extension  of  M(A;  P;  =  ),  for  which  w  is  a  model;  and  conversely,  every  extension  is 
formed  by  using  a  minimal  P-diagram  of  A  as  its  base. 

LEMMA  9.2  Let  A  be  a  set  of  first-order  sentences,  and  D  a  P-minimal  diagram  of 
A.  If  S  satisfies  the  equation 

S  =  {<f>  €  Co  \  M(A;  P;  =)  |=D  <£} 
then  it  is  the  kernel  of  an  extension  o/M(A;P;  =). 

Proof.  We  will  show  that  the  restriction  of  S  to  ground  atomic  P  and 
equality  literals  is  exactly  the  set  D ,  and  so  by  Proposition  8.1  S  is  the 
kernel  of  an  extension  of  M(A;P;=).  Note  that  D  is  saturated  with 
respect  to  equality  literals:  for  all  terms  a  and  b,  one  of  a  =  b  or  a^fib 
is  in  D.  From  the  fixing  of  equality  in  M(A;P;=),  all  of  these  are  also 
contained  in  S.  We  know  that  S  Pi  Atoms(A/";  P)  C  D ,  since  by  definition 
there  is  model  of  A  U  D  that  makes  all  Pc  not  in  D  false.  To  show  that 
S  contains  D  H  Atoms(.A/";P),  suppose  to  the  contrary  there  is  some  Pc 
in  D  that  is  not  in  S.  Then  there  is  a  model  of  M(A;P;  =)  respecting  D 
that  makes  D  —  {Pc}  true,  but  no  other  P  atoms,  since  Ax.Px  D  LPx 
forces  all  P  atoms  not  in  D  to  be  false.  But  we  assumed  D  was  a  minimal 
P-diagram,  and  10  contradicts  this. 

LEMMA  9.3  Let  Abe  a  set  of  first-order  sentences.  If  S  is  the  keimel  of  an  extension 
o/M(A;P;=),  then  every  model  satisfying  M(A;  P;  =)  and  respecting  S  is  a  P- 
minimal  parameter  model  of  A. 

Proof.  By  Proposition  8.1  S  satisfies  the  equation 
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S={cf>e£0\M(A-,P-=)  He  *}, 

where  D  is  S  fl  Lits(A/";  P;  =),  ancl  D  is  saturated  with  respect  to  equality 
literals  by  Proposition  8.2.  Define  E  as  the  set  of  equality  literals  in 
D.  Let  to  be  a  model  of  M(A;P;=)  respecting  D.  w  is  a  parameter 
model  satisfying  E  by  virtue  of  the  fixed  point  equation  for  extensions;  by 
Proposition  6.2  it  also  satisfies  the  P  atoms  of  D,  and  no  others.  Thus  D 
is  a  P-diagram  of  A.  Further  to  must  be  minimal  over  parameter  models 
satisfying  A UE.  Assume  to  the  contrary  that  there  is  a  model  to'  of  AuE 
whose  P  atoms  are  a  subset  of  to’s;  we  can  choose  w'  to  respect  D.  Then 
w'  satisfies  M(A;P;=),  but  some  atom  Pc  of  D  is  not  a  consequence  of 
to',  and  so  not  in  S ,  a  contradiction.  Thus  D  is  a  minimal  P-diagram  of 
A. 

PROPOSITION  9.4  Let  A  be  a  set  of  first- order  sentences.  A  first-order  sentence  is 
true  in  all  the  P-minimal  parameter  models  of  A  if  and  only  if  it  is  an  AE- 
consequence  o/M(A;P;=). 

Proof.  Let  ^  G  do  be  true  in  all  P-minimal  parameter  models  of  A. 
Suppose  S  is  the  kernel  of  some  extension  of  M(A;P;=),  and  <f>  (£  S.  By 
Lemma  9.3,  every  model  of  M(A;P;=)  respecting  S  is  a  P-minimal  pa¬ 
rameter  model  of  A,  and  so  S  must  contain  <f>  by  the  fixed-point  equation, 
a  contradiction. 

Conversely,  suppose  </>  is  true  in  all  extensions  of  M(A;  P;  =).  Let  w  be 
an  arbitrary  P-minimal  parameter  model,  and  assume  <j>  is  false  in  it.  w 
defines  a  minimal  P-diagram  D  of  A,  which  in  turn  defines  an  extension 
of  M(A;  P;  =)  by  Lemma  9.2,  and  to  is  a  model  of  its  kernel.  Since  is  in 
the  extension,  it  must  be  true  in  w ,  a  contradiction. 

We  have  now  shown  that  minimal  entailment  over  parameter  models  is  the  same  as 
AE-consequence  in  MIN=  theories.  Recall  that,  just  as  Herbrand  interpretations  are 
a  sufficient  semantics  for  universal  prenex  sentences,  so  too  parameter  interpretations 
suffice  for  sets  of  first-order  sentences.  By  “suffice”  we  mean  that  any  such  set  A  lias  a 
model  if  and  only  if  it  has  a  parameter  model.  Note  that  this  statement  is  not  true  in 
general  if  A  contains  all  members  of  Af]  for  example  the  set  {B.t-iP.t,  P«!,P«2 ,  •  •  *}, 
in  which  Pa,-  is  asserted  for  every  name  a,-  £  Af  has  a  model  but  no  parameter  model. 
Thus  we  must  stipulate  that  a  countably  infinite  set  of  names  in  Af  do  not  appear  in 
A.  For  minimal  entailment  over  countable  models,  parameter  models  are  sufficient. 

PROPOSITION  9.5  Let  <f)  be  a  sentence  of  Co  and  A  a  set  of  sentences  of  Co,  such 
that  some  infinite  subset  of  names  in  Af  do  not  appear  in  either  or  A.  Then 
f>  is  true  in  all  P-minimal  countable  models  of  A  (with  the  same  domain  and 
denotation  function)  if  and  only  if  it  is  true  in  all  P-minimal  parameter  models. 
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Proof.  Suppose  A  U  {^}  has  a  P-minimal  countable  model  w.  Let  the 
constants  C  =  {ci,  C2,  *  ■  *}  be  those  members  of  A f  not  mentioned  by  <f>  or 
A.  Let  ki  be  the  individual  referred  to  by  c,-.  Let  E  =  {ej,  e2,  •  •  •}  be  those 
individuals  with  no  names  in  w.  Construct  w'  as  follows:  it  has  the  same 
relations  and  domain  as  w ,  but  the  denotation  function  v  is  modified  so 
that  u(c2l)  =  e;,  w(c2f_i)  =  k{  for  i  >  0.  Every  element  has  a  name,  and 
furthermore  the  truthvalue  of  A  and  <j>  in  w'  is  the  same  as  w. 

To  show  that  w '  is  minimal  in  P  among  parameter  models,  assume 
there  is  another  model  w"  with  the  same  domain  and  denotation  function 
that  has  a  smaller  extension  of  P.  By  reassigning  u(c,)  =  ki,  we  could 
construct  a  model  of  A  and  <f>  whose  extension  of  P  would  be  smaller  than 
in  w,  a  contradiction. 

In  the  converse  direction,  if  A  U  {f}  has  a  minimal  parameter  model, 
it  obviously  has  a  minimal  countable  model. 
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10  Related  Work 


This  scheme  for  extending  the  semantics  of  AE  logic  to  the  quantified-in  case  is  similar 
to  that  proposed  for  the  epistemic  operators  in  [7].  The  problems  of  knowing  who 
and  quant ifying-in  axe  discussed  there  in  some  detail.  Some  of  the  results  that  are 
discussed  here  were  first  given  in  [9],  especially  the  connection  to  circumscription. 

Levesque  [11]  was  the  first  to  consider  using  a  self- referential  modal  language  to 
formalize  a  knowledge  base’s  information  about  its  own  contents.  Although  Moore’s 
autoepistemic  logic  [21]  was  developed  independently,  it  is  clear  there  are  many  ideas 
in  common  between  the  two. 

In  [12]  Levesque  considers  the  problem  of  quantify ing-in  for  AE  logic,  using  tech¬ 
niques  previously  developed  in  [11].  His  approach  differs  from  standard  qC  semantics 
in  that  it  is  based  on  the  denotation  of  terms  rather  than  their  intension.  He  considers 
a  revision  of  AE  logic  in  which  a  belief  sets  are  replaced  by  sets  of  interpretations, 
which  he  calls  assignments.  He  then  recasts  the  fixed  point  semantics  of  AE  logic 
in  terms  of  truth-recursion  equations  on  maximal  sets  of  assignments,  in  a  manner 
similar  to  the  possible-world  semantics  of  standard  epistemic  logics.  Let  W  be  a  set 
of  assignments,  and  w  any  member  of  W.  Then: 

(28)  W,  w  (=  L<f>  iff  for  all  w'  €  W,  W,  w'  (=  <f> 

If  <f>  is  nonmodal,  then  W,  w  \=  <j>  is  the  same  as  w  f=  <j),  that  is,  W  is  used  only  in  the 
interpretation  of  modal  atoms,  just  like  the  belief  set  in  (7). 

Because  the  semantics  is  based  on  assignments  rather  than  belief  sets,  there  is 
a  natural  way  to  understand  quantifying-in:  W,  w  \=  3 x.L<f>(x)  just  in  case  there  is 
some  individual  in  w  such  that  L<f>(x)  is  true  in  all  assignments  of  W.  This  is  similar 
to  the  analysis  of  quantifying-in  given  for  possible-world  semantics  of  epistemic  logics, 
in  which  the  same  individual  is  picked  out  in  each  possible  world. 

To  axiomatize  this  semantics,  Levesque  chooses  a  language  in  which  the  only  terms 
are  a  countable  set  of  standard  names,  so  that  every  individual  in  an  assignment  is 
denoted  by  a  unique  standard  name.  This  simplifies  the  analysis  of  equality,  but  it  also 
bypasses  the  representational  issues  we  raised  in  Sections  5  and  7;  for  example,  there 
is  no  way  to  state  a  default  version  of  the  unique  names  axioms.  It  is  an  interesting 
conjecture,  and  one  that  we  have  not  pursued,  that  our  version  of  AE  logic  with  the 
assumption  of  parameter  models  and  unique  names  is  equivalent  to  Levesque’s. 

Levesque  does  provide  a  sound  proof  theory  for  AE  consequence  that  has  com¬ 
plexity  n°,  that  is,  the  same  as  the  consistency  problem  for  first-order  logic.  He  has 
not  been  able  to  show  that  the  proof  theory  is  complete.  Given  the  results  of  Schlipf 
on  the  complexity  of  AE  consequence  in  qC ,  it  is  a  reasonable  conjecture  that  it  is 
not. 
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Closely  related  to  free  variables  in  modal  contexts  are  the  open  defaults  of  default 
logic.  Lifschitz  [16]  gives  a  semantics  for  open  defaults  that  is  similar  to  Levesque’s 
use  of  sets  of  assignments  and  standard  names,  except  that  he  allows  standard  names 
over  arbitrary  universes,  including  uncountable  ones.  He  considers  extensions  of  open 
default  theories  for  a  fixed  universe  U.  An  F- consequence  of  an  open  default  theory 
is  a  sentence  true  in  all  such  extensions.  He  is  able  to  show  a  result  similar  to  ours, 
that  the  default  logic  analogue  to  M(A;  P\  =)  theories  characterizes  the  P-minimal 
models  of  A.  His  result  is  more  general,  since  there  is  no  restriction  to  countable 
models.  On  the  other  hand,  because  default  logic  only  allows  universal  quantification 
in  open  defaults,  it  is  not  as  expressive  as  AE  logic  over  qC. 
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11  Conclusion 


Adding  quantifying-in  to  the  language  of  AE  logic  greatly  increases  its  expressive 
power.  We  are  able  to  express  defaults  about  comprehensive  class  knowledge  (min¬ 
imizing  a  predicate),  domain  closure,  and  unique  names.  Because  the  semantics  is 
based  on  the  intension  of  names,  rather  than  their  denotation,  we  are  also  able  to 
make  default  assumptions  that  are  sensitive  to  the  possibility  that  different  names  de¬ 
note  different  individuals,  without  absolutely  requiring  that  this  be  so,  as  in  Herbrand 
interpretations.  This  kind  of  reasoning  is  problematic  for  circumscriptive  techniques, 
and  not  adequately  addressed  in  default  or  AE  logic  without  quantifying-in. 

Given  the  importance  of  understanding  the  connections  between  the  proliferating 
number  of  nonmonotonic  formalisms,  it  is  encouraging  to  note  the  close  correspon¬ 
dence  between  AE  logic  with  quantifying-in  and  consequence  in  countable  minimal 
models.  Along  with  the  results  of  Lifschitz  [16],  we  get  a  much  clearer  picture  of  how 
minimization  is  expressed  in  nonmonotonic  logics  that  depend  on  fixed-point  con¬ 
structions,  and  it  is  interesting  that  these  logics  have  similar  expressive  capabilities. 
The  unfortunate  part  of  this  correspondence  is  that  the  complexity  of  AE  consequence 
for  qL  (and  for  open  defaults  under  F-consequence)  is  too  high  to  hope  for  any  type 
of  proof  theory  in  the  general  case.  A  recourse  would  be  to  find  subsets  of  q£  whose 
A  E-consequences  are  recursive  or  recursively  enumerable;  this  is  certainly  a  target  for 
research. 

Given  the  close  connections  between  AE  logic  and  negation  as  failure  in  logic 
programming  [4,  17],  the  results  of  this  paper,  especially  concerning  the  nature  of 
reasoning  about  individuals  and  equality,  might  be  usefully  applied  to  the  study  of 
quantification  in  negation  as  failure.  Such  a  study  could  yield  insight  into  the  answers 
that  general  logic  programs  return,  especially  if  we  want  to  ask,  “are  the  answers 
returned  all  the  individuals  that  satisfy  the  query?” 
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